ACE Serverform Error
I have ACE 4710 with c4710ace-mz.A3_2_2 Image.
Everything is working fine but I am getting followin failure Error for the severform related to my Proxy Server.
ACE02/Rack2# show serverfarm SF_BCPR
serverfarm : SF_BCPR, type: HOST
total rservers : 2
----------connections-----------
real weight state current total failures
---+---------------------+------+------------+----------+----------+---------
rserver: RS_BCPR01
192.168.0.103:0 8 OPERATIONAL 2661 5599360 4207
rserver: RS_BCPR02
192.168.0.104:0 8 OPERATIONAL 986 9991646 5324
I have checked the CPU and Memory load on the ACE there is no high load. I am concern about this failure what is the reason for this failure.
In general, the counter is incremented the following reason.
1) SYN timeout
2) RST received
3) Internal exception
Please monitor the following output. If Drop counter is incremented
when failures counter is incremented, ACE drops packets due to
internal exception.
show np 1 me-stats -sicm
show np 1 me-stats -socm
show np 1 me-stats -shttp
If Drop counter is not incremented, failures counter maybe incremented
by syn timeout or rst received. In that case, to isolate the source of the
problem, you will have to get capture trace on both client and server side.
Regards,
Yuji
Similar Messages
-
I have a ACE 4710 which I have enabled compression on the L7 policy map using compress default-method gzip. We have recently run a performance test and I have noticed many compression errors on the show service-policy detail output. However I cannot find details as to what these errors are or cause in any manual.
The comprssion specific stats from show service-policy detail are:
compression:
bytes_in : 14449218178 bytes_out : 6622221458
Compression ratio : 54.16%
Gzip: 2308157 Deflate: 0
compression errors:
User-Agent : 0 Accept-Encoding : 0
Content size: 1244 Content type : 160821
Not HTTP 1.1: 39 HTTP response error: 1935746
Others : 0
If I am reading this correctly 90% of compression hits where in error?
Can anyone point me at the correct documentation to find out what is going on?
ThanksIs it possible the HTTP Response errors are due to HTTP 304 responses?
-
ACE Context - Error: Resources in use
Hi All,
I am trying to associate a resource to a newly created context to enable configuration of sticky sessions within the context. When I assigne the context to the Resource Member it comes back as errored Resources in Use. Any idea's how I can get this configured as my deadlines are tight (thanks to our web developers bringing forward a go-live date to Monday).
The Key configurations are here:
resource-class BRONZE
limit-resource all minimum 0.01 maximum unlimited
limit-resource sticky minimum 0.01 maximum unlimited
resource-class GOLD
limit-resource all minimum 5.00 maximum unlimited
limit-resource sticky minimum 5.00 maximum unlimited
resource-class RESERVE
limit-resource all minimum 18.10 maximum equal-to-min
limit-resource sticky minimum 18.11 maximum equal-to-min
context ACCTX_SPT_FRN
description SPT Context
allocate-interface vlan 1204
allocate-interface vlan 1310
allocate-interface vlan 1410
context ACCTX_SSM_FRN
description SSM Context
allocate-interface vlan 1213
allocate-interface vlan 1313
allocate-interface vlan 1413
member GOLD
context reserve
member RESERVE
Obviously not all contexts shown - there are 14 in Total - 1 reserve, 2 Bronze, 9 Gold and 2 unassigned (of which 1 needs to be Gold).
I saw in previous posts the resource usage was key to identifying where issue could be. As I am learning this beast, I couldn't fully make sense of the previous posts so apologies for this:
Allocation
Resource Current Peak Min Max Denied
Context: Summary
conc-connections 115391 217571 3601600 65976000 0
mgmt-connections 69 326 2250 41250 0
proxy-connections 27736 49687 472060 8647590 0
xlates 0 0 472060 8647590 0
bandwidth 15037110 1503203965 450200000 3952032704 3915
connection rate 76 11281 450200 8247000 0
ssl-connections rate 10 1495 6754 123720 0
mgmt-traffic rate 618 277886 56275000 1030875000 0
mac-miss rate 0 868 900 16500 100033
inspect-conn rate 0 0 2700 49470 0
acl-memory 102912 109392 3930522 43220012 0
regexp 104 104 52429 576507 0
syslog buffer 4194304 4196352 209715 2306028 0
syslog rate 4 923 150 1649 0
Help is very much appreciated. There are no reported issues with current loads so the Denieds I take as a misnomer.
Regards
AdrianFrom my first idea I would think you use more then 100% of your sticky resource. maybe you should provide the whole context config.
-
After I had a computer crash awhile back I had to reformat my hard drive and reinstall all my software. Photoshop 7.0 is the only software I couldn't get to re-install. I keep keeping the following message after about 1% of my install it stops, and i get a message saying:
ComponentMoveData had the following error;
Media Name: data
Component: Required
File Group: App_Shared
File: ACE.dll
Error Number: -106 (refer to the online help)
What's going on? I have search Google for any possible cause and it seems that many others have had the same problem. I have tried most all of the suggestions including:
cleaning the disk and running a clean registry program. Any other ideas?
Main System:
2.0 Ghz AMD Anthlon XP-2600 Processor
1.25Gig PC3200 DDR Ram
Pioneer DVD-R/W DVR-112D Burner
GA-7VT600 Gigibyte Motherboard
NIVIA GeForce 6200 512 MB AGP Video Card
Seagate PATA/100 - 160GB Primary Drive
WDC /AC36 400L - 60GB Secondary Drive
WDC 500G AAV External USB Drive
Sony Blue-Ray DVD Player - BDPS350
Canon HG10 Video Camcorder
Windows XP Pro Edition - SP3Hi,
I am sorry that you are experiencing that error code wehn installing Photoshop 6.0. One thing you might do is check your windows update section. I found out in this discussion board: http://www.fixya.com/support/t187175-installing_error_code_106 that some users were also experiencing the error code 106 when installing Adobe Photoshop.
Make sure to see if you have successfully installed the .net update from windows (check the "solution section in that page as they provide you with a link"). Another issue I was thinking you may have(so does the link I provided) is that your hard drive may not be working right(check for bad sectors) as it cannot succesfully copy all the files to your OS.
Let me know if the link helped you.
Vicente Tulliano -
Ace - connection reset (Error 101)
Hi, I have a problem with a Cisco ACE, after approximately an hour being in production, for all new connections
it gives the message: connection reset. The message on any web browser is: connection reset (Error 101)
It blocks any backend server (Apache).I get same error also when I try to connect direcly to the backend address.
This error saturates the connections on the servers (in the log of the DB I found error connection reset)
Without ACE all work fine, it's not a load traffic issue.
It seems like once opened a connection the ace does not close it anymore!
But the graphical snmp servers do not report the increase in connections, what is mistake ?
The balancer manages two physical servers and is configured in stickyness mode
Please find attached the configuration
logging enable
logging timestamp
logging trap 4
logging buffered 3
logging host 172.16.0.2 udp/514 format emblem
access-list ANY line 8 extended permit icmp any any
access-list ANY line 16 extended permit ip any any
probe http HTTP_PROBE1
request method get url /index.php
expect status 200 206
expect status 300 307
expect status 400 417
probe tcp PROBE_TCP
interval 30
rserver host 03a.it
ip address 172.16.0.1
conn-limit max 50000 min 40000
inservice
rserver host 03b.it
ip address 172.16.0.2
conn-limit max 50000 min 40000
inservice
serverfarm host FARM_WEB
predictor leastconns
probe HTTP_PROBE1
rserver 03a.it
inservice
rserver 03b.it
inservice
parameter-map type http HTTP_PARAMETER_MAP
persistence-rebalance
sticky http-cookie session StickyGroup1
timeout 3600
serverfarm FARM_WEB
class-map type management match-all ICMP-ALLOW_CLASS
2 match protocol icmp source-address x.x.x.x
class-map match-all L4-WEB-IP
2 match virtual-address x.x.x.x tcp eq www
class-map type management match-all REMOTE_ACCESS
2 match protocol ssh any
policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY
class REMOTE_ACCESS
permit
policy-map type loadbalance http first-match WEB_L7_POLICY
class class-default
sticky-serverfarm StickyGroup1
insert-http x-forward header-value "%is"
policy-map multi-match WEB-to-vIPs
class L4-WEB-IP
loadbalance vip inservice
loadbalance policy WEB_L7_POLICY
loadbalance vip icmp-reply active
nat dynamic 1 vlan 2541
appl-parameter http advanced-options HTTP_PARAMETER_MAP
interface vlan 125
ip address
access-group input ANY
service-policy input REMOTE_MGMT_ALLOW_POLICY
service-policy input WEB-to-vIPs
no shutdown
interface vlan 254
ip address
access-group input ANY
nat-pool
service-policy input REMOTE_MGMT_ALLOW_POLICY
no shutdown
At the moment this happens, the simultaneous connections (command: show conn) on the server are around 350
the CPU load is 2%
sticky database has approximately 24000 records.
Log level is set to 4. But no error report.
Do you need more info to resolve the problem?
Thank you
Best Regards
N.Hello Nicolas,
I wonder if you can include these values:
parameter-map type http HTTP_PARAMETER_MAP
case-insensitive
persistence-rebalance
set header-maxparse-length 65535
set content-maxparse-length 65535
length-exceed continue
parsing non-strict
I also noticed a lot of errors which might be caused also due to these denied under the #show resource usage all which may indicate you are reaching the license limits, but you should discuss it with your Cisco SE, please see below:
Allocation
Resource Current Peak Min Max Denied
Context: vrack254
conc-connections 4 1267 60000 60000 0
mgmt-connections 2 28 748 748 0
proxy-connections 0 1255 7864 7864 0
xlates 0 0 7864 7864 0
bandwidth 572 3824781 3740624 127490624 1416859
throughput 96 3712886 3740624 3740624 1416859
mgmt-traffic rate 476 111895 0 123750000 0
connection rate 1 1729 4500 4500 0
ssl-connections rate 0 0 224 224 0
mac-miss rate 0 15 16 16 4
inspect-conn rate 0 0 1800 1800 0
http-comp rate 0 0 5898240 5898240 0
to-cp-ipcp rate 0 11 36 36 0
acl-memory 8216 10568 744800 744800 0
sticky 22978 22978 31456 31456 0
regexp 19 23 7864 7864 0
syslog buffer 30720 30720 30720 30720 0
syslog rate 0 6 750 750 0
Can you upload the specific error which you are getting also?
Jorge -
I have 2 ACE appliances running in active/standby. On each appliance I have port 3 used for FT and port 4 used for server traffic. Every one of the connections terminates on a 3750 10/100 switch. The switch ports (all configured as access ports) are configured the same way and each of the connections from port 4 (the server port) works great with no interface errors. However, on BOTH ACE appliances, port 3, (the FT port) causes non-stop input errors and runts on the switch interface and failover will not work. I have tried to hardset the speed/duplex on both devices and every other possible combination with no success. AS A TEST ONLY --> When I plugged each of the FT interfaces into a $10 linksys hub, failover worked perfectly.
Since using the $10 hub is not an option, any ideas on what I can try to fix the issue?The FT interface is a trunk interface.
You have to set your switch to trunking mode not access mode.
This is explained somewhere in the documentation.
Gilles. -
ACE duplicate ack and tcp out-of-order errors
Hi,
I have just performed a capture using a NAM in my 6500 on the port attached to my ACE appliance.
What i have noticed in the capture is a lot of duplicate ack errors and tcp out-of-sync errors.
The reason we found this was becuase the link utilisation per session seems higher than we expected, hence are the errors adding to this and is there any way to remedy them?
Thanks
ScottHi Scott,
I'm not sure why you would see duplicate packets, although when you use SPAN, I know you can see them when you configure it to capture both directions on a VLAN. This is because you see each packet as it enters and leaves the VLAN. I don't know if that would apply to a NAM.
One thing you could do is use the ACE 4710's built-in capture utility to see if you see the same symptoms from an alternative source. This is covered in the Capturing Packet Information section of the configuration guides.
Hope this helps,
Sean -
Cisco ACE key.pem import error
Hi
after extracting the Cert.pem and Key.pem from the PXF file.
i am get the following error trying to import the Key.pem file to the ACE
ENG-CTN-ACE01/Admin# crypto import tftp 10.3.31.249 key5.pem key5
Trying to connect to tftp server......
TFTP get operation was successful
3294 bytes copied
Successfully imported file from remote server.
Error: File not of supported key or certificate type - RSA, import failed.
ENG-CTN-ACE01/Admin#
* i have decrypted the key.pem and tried adding the key manually with crypto import terminal command but still getting the same error.
can you please assist as want am i doing wrong.
the cert has been uploaded successfully.
Filename File File Expor Key/
Size Type table Cert
cisco-sample-cert 1082 PEM Yes CERT
cisco-sample-key 887 PEM Yes KEY
wildcard-20140102.cer 1459 DER Yes CERT
Thanks
rayyaanHI Rayyaan,
This is a key which you cannot share so that i can try here on my and see what is going on so i would suggested contacting your CA vendor and ask them to provide the key and cert in PEM format. Once you have that try it again. That's all i guess we can do here or you can open a TAC case and see what is going on. If the key is in PEM format ACE shouldn't have any problem in accepting it.
From user guide:
Importing Certificate and Key Pair Files
The ACE supports the importation of PEM-encoded key pairs and certificates (including wildcard certificates) signed by keys. The ACE allows a maximum public key size of 4096 bits. The maximum private key size is 2048 bits.
You can import a certificate or key pair file to the ACE from a remote server by using the crypto import command in Exec mode. You can import either individual certificates and keys or multiple certificates and keys. Because a network device uses its certificate and corresponding public key together to prove its identity during the SSL handshake, be sure to import both the certificate file and its corresponding key pair file.
The ACE supports the importation of PEM-encoded SSL certificates and keys with a maximum line width of 130 characters using the terminal. If an SSL certificate or key is not wrapped or it exceeds 130 characters per line, use a text editor such as the visual (vi) editor or Notepad to manually wrap the certificate or key to less than 130 characters per line. Alternatively, you can import the certificate or key by using SFTP, FTP, or TFTP with no regard to line width
Regards,
Kanwal -
Getting Redifinition error while compile ACE 5.5.
Hi,
I am trying to compile ACE 5.5 in C++.NET but it is giving following error. plz help me how to solve this error.
c:\ACE_wrappers\ace\Global_Macros.h(56): error C2086: 'int ACE_BEGIN_VERSIONED_NAMESPACE_DECL' : redefinition
..\ace\Assert.h(23) : see declaration of 'ACE_BEGIN_VERSIONED_NAMESPACE_DECL'
Error i am getting for following CODE:
ACE_BEGIN_VERSIONED_NAMESPACE_DECL
class ACE_Export ACE_No_Heap_Check
public:
ACE_No_Heap_Check (void)
: old_state (_CrtSetDbgFlag (_CRTDBG_REPORT_FLAG))
{ _CrtSetDbgFlag (old_state & ~_CRTDBG_ALLOC_MEM_DF);}
~ACE_No_Heap_Check (void) { _CrtSetDbgFlag (old_state);}
private:
int old_state;
ACE_END_VERSIONED_NAMESPACE_DECL
Actually this "ACE_BEGIN_VERSIONED_NAMESPACE_DECL" is decleared some were in a file but i don't know how to find the declaration also. Plz help me.
Message was edited by:
VishnuVardhanIt sounds like you are using Microsoft Visual C++. Although general C++ questions are OK in this forum, questions about using compilers other than Sun C++ belong in some other forum. For Microsoft C++, try a Microsoft forum.
-
Error while processing ACE 7.80C
I am getting the following error while attempting to process a file thru ACE.
03:50:34pm Verification Error
03:50:34pm ERROR: BAD_MAJOR_VER, Your version of the software is not compatible with the version of your installed directories.
03:50:34pm
03:50:34pm Verification Error
03:50:34pm Auxiliary Files Block: 1
The <Directory> parameter specifies a file <undetermined directory name>, which is not a valid directory
03:50:34pm This Job Failed Verification
We are on ACE 7.80C, directory updates were done last week as they were about to expire.
Thanks, MaryMary,
Download and install the compatible CASS Cycle directories for the version of ACE being run.
For example:
- If ACE 8.00c is installed, download the BOBJ ADDR US 2009 directories from SAP Service Marketplace (SMP).
- If ACE 7.90c and earlier is installed, download the BOBJ ADDR US 2004-08 directories from SAP Service Marketplace (SMP).
Thanks,
Kendra -
Ace Software is not compatible error
I am using the the ace32.dll for address validation from within a VB6 app. We are in the process of upgrading to version 8. We have created a new folder a put all of the updated .dir files and other support files in. I put the new version of the ace32.dll in the system32 directory overwriting the previous version. When I try to run the VB app I now get an error that says the "ace32.dll can not be found". If I put back the previous version of the ace32.dll I get an error that says "ace software is not compatible with the version of your intalled directories". I would appreciate any ideas you might have as to what I am missing.
Greetings Oscar,
Did you get an answer to this question? I see that you logged this forum thread back in May 2009.
Was an incident logged with the Support team to research this issue?
We currenlty have a Postalsoft Forum that customers who use Classic Firstlogic products can post questions.
Rob
Technical Engineer
Customer Assurance -
Error on sessioning into ACE module
Hi,
I am getting the below error on sessioning into ACE module in CAT 6500.
6509A#session sl 2 pr 1
The default escape character is Ctrl-^, then x.
You can also type 'exit' at the remote prompt to end the session
Trying 127.0.0.21 ...
% Connection timed out; remote host not responding
Slot 2 is the ACE module. Please assist.Ok. It is working now. The processor should be '0'. Could anyone please explain the significance of the processor # in session slot command.
Regards. -
ACE - unable to execute various show commands. Error: Called API timed out
Hi I am runnng version A2(2.3) on a HA ACE setup.
I have noticed today that issuing various show commands such as 'show run' and 'show probe' on the active ACE have suddenly stopped working. On hitting return the ACE sits there for a while non respondant before finally outputting an Error: Called API timed out and then returning to the command prompt. It only seems to happen on show commands that would generate a lot of output, for example a 'show version' works. I have also noticed a delay sometimes in logging into the active ACE which has again only come to light today.
We havent made any changes recently and this behavior has not been seen before.
I could only find one similar posting which kind of suggested that a high logging level may be to blame for this issue, we are running at debugging level but have since the ACE's were brought into play over 12 months ago (yep i know logging at that level is far from ideal).
Production traffic does not seem to be affected at present.
Apart from reudcing the logging level I am not sure what else could be causing this issue, has anyone come across this one before?
Unfortunaltey the 'show resource usgae in one of the commands that wont work'
A 'show cpu' command shows nothing above 10%
Though multiple context are configured (3), the default resource allocation is in place between all three.
Thanks for taking the time to read.Thanks for the response I will take a look at that Bug ID.
In the end as you have already suggested above I ended up failing across to the standby ACE and powering down/up the affected ACE module from the switch CLI. This seems to have restored all functionality. Even a soft reload command prior on the affected ACE didnt take affect. -
Cisco ACE Appliance showing error while boot
Hello Everyone,
I intend to Configure two ACE appliance in one arm mode, Post configuration I have tried to test the functionalities of the same.
Below are the queries which I am having now.
>Post reboot of the appliance it popped with the error ,pls clarify .
Starting sysmgr processes.. Please wait...tg3: tg3_reset_hw timed out for eth1, firmware will not restart magic=4b657654
tg3: tg3_reset_hw timed out for eth1, firmware will not restart magic=4b657654
Done!!!
> Please confirm whether SNAT is compusory for one-arm mode setup . as our requirement is to loadbalance only the requests from the clients .
the reply from server should go back to the client directly .
> How can I achieve the HA config with out dedicated port . as I have configured port channel for all the 4 ports . I am not interested to provide the seperate port for HA.
Thanks in advanceHi,
> Please confirm whether SNAT is compusory for one-arm mode setup . as our requirement is to loadbalance only the requests from the clients .
the reply from server should go back to the client directly .
**Mos of the times SNAT is require but is not must. For example, you can have the servers connected to a L2 Switch, using the ACE as DG and you probably don't need SNAT.
The important is to have the response of the server going back to the ACE with or without NAT
> How can I achieve the HA config with out dedicated port . as I have configured port channel for all the 4 ports . I am not interested to provide the seperate port for HA.
***Configure in the portchannel the ft-port vlan command. Remember that the FT vlan should be L2, no L3 devices in between the ACEs
Cesar R
ANS Team -
I am trying to execute this Select against my excel file
SELECT * FROM OPENROWSET('Microsoft.ACE.OLEDB.12.0', 'Excel 12.0; HDR=NO; IMEX=1; Database=C:\Temp\test.xlsx', 'SELECT * FROM [Sheet1$]')
I have followed every single step according to this article here
http://visakhm.blogspot.ca/2013/12/how-to-solve-microsoftaceoledb120-error.html
but still getting the same error as metioned in the title. Can anyone suggest what else could be wrong?
The environment is SQL 2005 64 bit with Office 64 Bit drivers (Access 64 bit engine installed)I am trying to execute this Select against my excel file
SELECT * FROM OPENROWSET('Microsoft.ACE.OLEDB.12.0', 'Excel 12.0; HDR=NO; IMEX=1; Database=C:\Temp\test.xlsx', 'SELECT * FROM [Sheet1$]')
I have followed every single step according to this article here
http://visakhm.blogspot.ca/2013/12/how-to-solve-microsoftaceoledb120-error.html
but still getting the same error as metioned in the title. Can anyone suggest what else could be wrong?
The environment is SQL 2005 64 bit with Office 64 Bit drivers (Access 64 bit engine installed)
Hi ,
I think this help u little to run excel file in ssis.In instal Access bit not work well on ssis any version.you need to change debugging 1 option from true to false.
This is the step for change it:
1. Right click on your project then go to properties.
2.then go to debugging.
3.Then there is a option debug.go there and change "Run64bitRuntime" true to false.
I think your problem solve.
Told me if u not understand anything my English so bad
Thanks
Muzahid.
Maybe you are looking for
-
Hey, I upgrade from SL to Lion without any problems but have decided to do a full reinstall. Although I have a Time Machine Backup, I've done another, manual, backup of certain files, and Mail is the last one to do. I can't find any instructions fo
-
Getting the UPDATEd value and its primary key
I have two procedures, proc1 and proc2. In proc1 there is an update happening like CREATE OR REPLACE procedure proc1 as TYPE NumList IS TABLE OF employees.employee_id%TYPE; enums NumList; TYPE NameList IS TABLE OF employees.last_name%TYPE; names Name
-
Dear Sir, We had done Retention, ie from a normal invoice we have transfered to a special G/l account , using 39 Y posting key, now when i want to do payment for that retention document ie i want to do partial payment, its shows the feild in gray, ie
-
Formatting FAT32 in OSX DiskUtility
Im Running Leopard 10.5.6 on my macbookpro This may be nit picking, but just out curiosity had a inquiry about formatting and naming harddrives to Fat32 in DU. I had a MyBook 500GB harddrive i was using for my network drive to use between Mac&PCs (it
-
Why cant I view the international version of a website, only my local version
I wish to vie the Amsterdam version of the Scotch and Soda web store (their head office store). However, when I click on their web address, I am automatically redirected to the Australian store because I reside in Australia. I have disable the Firefo